|
Injection into a Process Using KnownDlls |
|
|
|
|
Tuesday, 13 December 2011 17:02 |
|
In his article, we will consider an interesting, universal and rarely used method of code injection into a Windows process using KnownDlls sections. To demonstrate the method work we will develop a sample project to inject into all running processes and intercept some calls from ws2_32.dll.
Injection into a process supposes injection of the custom code into the address space of some processes. In other words, we get access to the process code, its data, the code of the system DLLs, which are loaded to the process, etc.
Why to inject into a third-party process? There can be a lot of causes, both destructive – steal passwords, hack protected application – and peaceful ones: like antivirus analysis and protection, improvement and maintenance of an application, which source code you don’t have.
|
|
Read more...
|
|
|
Android Rooting for Programmers |
|
|
|
|
Friday, 28 October 2011 12:59 |
|
You have an Android Device and you are familiar with Linux based operating systems. Maybe, you like SSH or telnet to communicate with the device; you want to setup your device as a router to connect home PC to the Internet. However, you will be surprised. Android has neither login screen nor possibility to gain privileged user access to the system to do these things. This is one of the Android security principles to isolate applications from the user, each other, and the system.
In this article, I will describe you how to gain root access on an Android device in spite of security. I will delve deeply into one of the Android rooting principles - the adb exhaustion attack, which is simpler to understand than a previous udev exploit. It is suitable for all Android-powered devices with the version 2.2 and lower.
|
|
Read more...
|
|
Monitoring and Managing Windows Processes |
|
|
|
|
Thursday, 27 October 2011 14:17 |
|
This article describes a simple solution that will help you to clear out the principles of how Windows system starts processes and show how you can set some filters for process start, including allowing and forbidding them.
|
|
Read more...
|
|
Objective-C from the Scratch |
|
|
|
|
Saturday, 09 July 2011 10:18 |
|
Anyone who wants to develop programs for the products of Apple Company meets such a moment in his life when he needs to learn new programming language - Objective-C. I met such moment once too. I decided to take notes of my thoughts when understanding the documentation to remember the main specifics of this language.
|
|
Read more...
|
|
An Implementation of P-way external merge algorithm under Linux |
|
|
|
|
Thursday, 30 June 2011 16:47 |
|
This article demonstrates one possible method of merging N sorted large text files using Forecasting algorithm in the style suggested by D.Knuth. The demo app "for_merge" will merge them faster than standard Unix "sort" utility by starting test suite. This code also could be useful for implementation of second part of Merge-Sort algorithm (where merging takes place). Note, that Input files are generated before test suite starts.
|
|
Read more...
|
|
LSP (Layered Service Provider) based HTTP sniffer |
|
|
|
|
Thursday, 30 June 2011 14:46 |
|
This article describes how to create a simple sniffer for monitoring HTTP traffic on Windows OS. This tool is based on open source technology provided by Microsoft – LSP (Layered Service Provider). This technology is widely used by different software. The majority of these software products are antivirus, firewalls and traffic filtering applications.
To create this tool I`ve taken Microsoft Platform SDK sample (Program Files\Microsoft Platform SDK\Samples\NetDS\WinSock\LSP\) and implemented some additional logic for filtering HTTP traffic and collecting results in one separate storage.
|
|
Read more...
|
|
|
|
|
|
|
|
Page 1 of 12 |